* Package name    : libpam-rssh
  Version         : -
  Upstream Contact: Yuxiang Zhang
* URL             : https://github.com/z4yx/pam_rssh
* License         : MIT
  Programming Lang: Rust
  Description     : This PAM module provides ssh-agent based authentication, with hardware security key support. It's useful combination for sudo/doas.

Since the package libpam-ssh-agent-auth doesn't further developed and it hasn't
any support for hardware security key. It would be reasonable to put an
alternative package with similar function/

This PAM module provides ssh-agent based authentication. The primary design goal
is to avoid typing password when you sudo on remote servers. Instead, you can
simply touch your hardware security key (e.g. Yubikey/Canokey) to fulfill user
verification. The process is done by forwarding the remote authentication request
to client-side ssh-agent as a signature request.

I'm using it since over one year and it works well.